This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
References
Link | Resource |
---|---|
https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9 | Broken Link |
https://github.com/gulpjs/glob-parent/pull/36 | Patch Third Party Advisory |
https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2 | Release Notes Third Party Advisory |
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093 | Exploit Third Party Advisory |
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092 | Exploit Third Party Advisory |
https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 | Exploit Third Party Advisory |
https://www.oracle.com/security-alerts/cpujan2022.html | Patch Third Party Advisory |
Configurations
History
No history.
Information
Published : 2021-06-03 16:15
Updated : 2024-02-28 18:28
NVD link : CVE-2020-28469
Mitre link : CVE-2020-28469
CVE.ORG link : CVE-2020-28469
JSON object : View
Products Affected
oracle
- communications_cloud_native_core_policy
gulpjs
- glob-parent
CWE
CWE-400
Uncontrolled Resource Consumption